# xmount を Homebrew, apt, dnf でインストール xmount のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:xmount ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install xmount ``` 証拠: local Homebrew formula metadata ### Linux - Debian apt (92%): ```sh sudo apt install xmount ``` 証拠: Debian stable package indexes: xmount from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install xmount ``` 証拠: Fedora Rawhide package metadata: xmount from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst ## パッケージ情報 - **パッケージキー:** brew:xmount - **パッケージマネージャ:** Homebrew - **バージョン:** 1.3.1 - **ソース概要:** Convert between multiple input & output disk image types - **ホームページ:** - **生成日時:** 2026-08-03T19:37:03+00:00 ## 実行可能ファイル - xmount (エイリアス) ## インストール挙動 - Bottle: 利用不可 ## バージョンと鮮度 - ページ生成日: 2026-08-03 - マネージャ版: 1.3.1 ## プロジェクトの歴史と使われ方 xmount is a digital-forensics utility for exposing one disk-image format as another through FUSE. Its core trick is on-the-fly conversion: a raw, EWF, AFF, VDI, or QCOW-style evidence image can be mounted as a virtual raw, DMG, VHD, VDI, or VMDK-like image without first making a full converted copy. ### プロジェクトの歴史 The original project page at pinguin.lu describes the older xmount line, credits Guy Voncken for the idea and bug help, and notes that the project later moved to SITS. The current SITS page is the maintained project home and points to the SITS Git repository and releases. The SITS README documents a modernized 1.x architecture with external input libraries and morphing libraries. That design lets xmount support forensic formats through libraries such as libewf and AFF/AFF4 implementations while also handling operations such as combining multiple images, RAID0 reconstruction, byte swapping, and extraction of unallocated sectors. ### 採用の歴史 xmount's adoption is forensic-practitioner adoption rather than mass developer adoption. It entered Debian/Ubuntu packaging, which the SITS page explicitly acknowledges, and it appears in security distributions such as Kali because investigators frequently need to bridge evidence-image formats and virtualization tools. SANS Internet Storm Center coverage captures the practical appeal: xmount is handy when a workflow needs DD, EWF, or AFF input and a format that can be consumed by analysis or virtualization tooling. The SITS page makes the same point with booting acquired images in QEMU, KVM, VirtualBox, or VMware while redirecting writes to a cache file. ### 使われ方 A typical xmount workflow mounts an acquired disk image read-mostly through FUSE, exposes a virtual output image in the requested format, and then attaches that output to forensic tools or a virtual machine. Virtual write support redirects changes into a cache file so the original evidence image is not modified. More advanced usage uses morphing: multiple image segments can be combined, RAID0 member disks can be reconstructed, and selected filesystem regions can be presented as a derived virtual image. That makes xmount useful in the awkward middle of a case, where evidence format, analysis tool, and hypervisor all expect different disk-image conventions. ### パッケージ好きにとっての重要性 xmount is a good example of a package that exists because copying giant images is the wrong abstraction. The package value is not a new archive format; it is the Unix move of presenting a virtual filesystem facade over messy real-world evidence formats. For package nerds, it also sits at the crossroads of FUSE, forensic image libraries, and VM disk formats. Installing one CLI can remove several slow, lossy, or storage-heavy conversion steps from an incident-response workstation. ### タイムライン - Pre-2024: The original pinguin.lu project page documents xmount 0.7-era features such as CMake, multiple input images, image morphing, and internal EWF support. - 2024-03-13: The current SITS GitLab project is created. - 2024-2026: The SITS README copyright span and releases document the maintained 1.x line under SITS. - 2020s: xmount remains packaged in forensic/security-oriented distributions for mounting and converting evidence disk images through FUSE. ### Related projects - Guymager is the forensic acquisition tool credited by xmount's project pages and linked from the acknowledgments. - libewf and afflib provide support for common forensic evidence image formats used by xmount. - FUSE is the user-space filesystem layer that lets xmount present virtual converted disk images without writing a full output copy. - QEMU, KVM, VirtualBox, and VMware are common consumers of xmount's virtual output images. ### ソース - - - - - - ## セキュリティノート broad file, network, media, or database tool signal. - **Geiger リスク:** blue / 中 - broad file, network, media, or database tool signal ## 他のパッケージマネージャ記録 - Debian apt - xmount - 1.2.0+ds-1+b1: normalized package name match | Debian stable package indexes: xmount from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | tool for crossmounting between disk image formats | https://www.sits.lu/xmount - Ubuntu apt - xmount - 0.7.6-3build2: normalized package name match | Ubuntu 24.04 LTS package indexes: xmount from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | tool for crossmounting between disk image formats | https://www.pinguin.lu/ - dnf - xmount - 1.3.1-1.fc45: normalized package name match | Fedora Rawhide package metadata: xmount from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A on-the-fly convert for multiple hard disk image types | https://www.sits.lu/xmount ## Combined YAML source View the package source record on GitHub. [combined/xmount.yml](https://github.com/mxcl/pkgdb/blob/main/combined/xmount.yml) ## ソース - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph